Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,528

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,109

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 16261–16290 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-45010	medium	5.9/10	WordPress Complete Open Graph Plugin <= 3.4.5 is vulnerable to Cross Site Scripting (XSS)	Oct 17, 2023 2y ago
CVE-2023-45005	high	7.1/10	WordPress Seriously Simple Stats Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)	Oct 17, 2023 2y ago
CVE-2023-44990	medium	5.9/10	WordPress WOLF Plugin <= 1.0.7.1 is vulnerable to Cross Site Scripting (XSS)	Oct 17, 2023 2y ago
CVE-2023-24385	medium	5.9/10	WordPress Media Library Assistant Plugin <= 3.11 is vulnerable to Cross Site Scripting (XSS)	Oct 17, 2023 2y ago
CVE-2023-4811	—	—	WordPress File Upload < 4.23.3 - Author+ Stored Cross-Site Scripting	Oct 16, 2023 2y ago
CVE-2023-3706	—	—	ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Title Disclosure	Oct 16, 2023 2y ago
CVE-2023-3746	—	—	ActivityPub for WordPress < 1.0.1 - Contributor+ Stored XSS	Oct 16, 2023 2y ago
CVE-2023-5057	—	—	ActivityPub for WordPress < 1.0.0 - Contributor+ Stored XSS	Oct 16, 2023 2y ago
CVE-2023-3707	—	—	ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Content Disclosure	Oct 16, 2023 2y ago
CVE-2023-5561	—	—	WordPress < 6.3.2 - Unauthenticated Post Author Email Disclosure	Oct 16, 2023 2y ago
CVE-2023-46087	medium	4.3/10	WordPress Who Hit The Page – Hit Counter Plugin <= 1.4.14.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-46066	medium	5.9/10	WordPress Mediabay Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)	Oct 16, 2023 2y ago
CVE-2023-44987	medium	5.9/10	WordPress Timely Booking Button Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)	Oct 16, 2023 2y ago
CVE-2023-44986	medium	5.9/10	WordPress Abandoned Cart Lite for WooCommerce Plugin <= 5.15.2 is vulnerable to Cross Site Scripting (XSS)	Oct 16, 2023 2y ago
CVE-2023-44985	medium	6.5/10	WordPress BuddyMeet Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)	Oct 16, 2023 2y ago
CVE-2023-44984	medium	6.5/10	WordPress bbp style pack Plugin <= 5.6.7 is vulnerable to Cross Site Scripting (XSS)	Oct 16, 2023 2y ago
CVE-2023-44229	medium	5.9/10	WordPress Tiny Carousel Horizontal Slider Plugin <= 8.1 is vulnerable to Cross Site Scripting (XSS)	Oct 16, 2023 2y ago
CVE-2023-45836	medium	4.3/10	WordPress Ultimate Taxonomy Manager Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45831	medium	5.4/10	WordPress AMP WP Plugin <= 1.5.15 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45763	medium	5.4/10	WordPress Taggbox Plugin <= 2.9 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45753	medium	4.3/10	WordPress which template file Plugin <= 4.6.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45752	medium	4.3/10	WordPress Post Gallery Plugin <= 2.3.12 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45749	medium	4.3/10	WordPress AGP Font Awesome Collection Plugin <= 3.2.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45748	medium	4.3/10	WordPress MailChimp Forms by MailMunch Plugin <= 3.1.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45647	medium	5.4/10	WordPress Constant Contact Forms by MailMunch Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45645	medium	5.4/10	WordPress WP Open Street Map Plugin <= 1.25 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45643	medium	4.3/10	WordPress CPT Shortcode Generator Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45642	medium	5.4/10	WordPress Snap Pixel Plugin <= 1.5.7 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45641	medium	5.4/10	WordPress Caret Country Access Limit Plugin <= 1.0.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45639	medium	4.3/10	WordPress Sort SearchResult By Title Plugin <= 10.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago